Skip to main content

Enhance your secret detection capabilities with Copilot secret scanning

Learn how secret scanning uses AI to detect generic secrets in your code, and generate regular expressions for your custom patterns.

Who can use this feature?

Secret scanning is available for the following repositories:

  • Public repositories (for free)
  • Private and internal repositories in organizations using GitHub Enterprise Cloud with GitHub Advanced Security enabled
  • User-owned repositories for GitHub Enterprise Cloud with Enterprise Managed Users

Responsible detection of generic secrets with Copilot secret scanning

Learn how Copilot secret scanning uses AI responsibly to scan and create alerts for unstructured secrets, such as passwords.

Enabling Copilot secret scanning's generic secret detection

You can enable generic secret detection for your repository or organization. Alerts for generic secrets, such as passwords, are displayed in a separate list on the secret scanning alerts page.

Responsible use of AI to define regular expressions

Learn about the capabilities and limitations of the regular expression generator in helping you to define custom patterns to extend the capabilities of secret scanning.

Generating regular expressions for custom patterns with AI

You can use the regular expression generator to generate regular expressions for custom patterns. The generator uses an AI model to generate expressions that match your input, and optionally example strings.